Vulnerabilities

Tracked app vulnerabilities

12,531 CVEs affect a tracked app or OS (High, Windows). 246 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 12,531
Actively exploited: 246
Publication window: 2004-07-27 → 2026-11-11

All CVEs 12,531 CISA KEV 246 Public exploit 358 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

12,531 entries High Windows Clear all

CVE	Severity	KEV	Apps	Published
CVE-2018-8502 HIGH 8.8 2018-10-10 A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in Protected View, aka "Microsoft E…	HIGH 8.8	—		2018-10-10
CVE-2018-8501 HIGH 8.8 2018-10-10 A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle objects in Protected View, aka "Micros…	HIGH 8.8	—		2018-10-10
CVE-2018-8473 HIGH 7.5 Microsoft Edge 2018-10-10 A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability." T…	HIGH 7.5	—	Microsoft Edge	2018-10-10
CVE-2018-8453 HIGH 7.8 KEV Windows 2018-10-10 An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privil…	HIGH 7.8	KEV	Windows	2018-10-10
CVE-2018-8506 HIGH · vendor Windows 2018-10-09 Microsoft Windows Codecs Library Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2018-10-09
CVE-2018-8497 HIGH · vendor Windows 2018-10-09 Windows Kernel Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2018-10-09
CVE-2018-8495 HIGH · vendor Windows 2018-10-09 Windows Shell Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2018-10-09
CVE-2018-8493 HIGH · vendor Windows 2018-10-09 Windows TCP/IP Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2018-10-09
CVE-2018-8492 HIGH · vendor Windows 2018-10-09 Device Guard Code Integrity Policy Security Feature Bypass Vulnerability	HIGH · vendor	—	Windows	2018-10-09
CVE-2018-8486 HIGH · vendor Windows 2018-10-09 DirectX Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2018-10-09
CVE-2018-8484 HIGH · vendor Windows 2018-10-09 DirectX Graphics Kernel Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2018-10-09
CVE-2018-8482 HIGH · vendor Windows 2018-10-09 Windows Media Player Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2018-10-09
CVE-2018-8481 HIGH · vendor Windows 2018-10-09 Windows Media Player Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2018-10-09
CVE-2018-8472 HIGH · vendor Windows 2018-10-09 Windows GDI Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2018-10-09
CVE-2018-8432 HIGH · vendor Windows 2018-10-09 Microsoft Graphics Components Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2018-10-09
CVE-2018-8423 HIGH · vendor Windows 2018-10-09 Microsoft JET Database Engine Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2018-10-09
CVE-2018-8413 HIGH · vendor Windows 2018-10-09 Windows Theme API Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2018-10-09
CVE-2018-8411 HIGH · vendor Windows 2018-10-09 NTFS Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2018-10-09
CVE-2018-8333 HIGH · vendor Windows 2018-10-09 Microsoft Filter Manager Elevation Of Privilege Vulnerability	HIGH · vendor	—	Windows	2018-10-09
CVE-2018-8330 HIGH · vendor Windows 2018-10-09 Windows Kernel Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2018-10-09
CVE-2018-8329 HIGH · vendor Windows 2018-10-09 Linux On Windows Elevation Of Privilege Vulnerability	HIGH · vendor	—	Windows	2018-10-09
CVE-2018-8320 HIGH · vendor Windows 2018-10-09 Windows DNS Security Feature Bypass Vulnerability	HIGH · vendor	—	Windows	2018-10-09
CVE-2018-6055 HIGH 8.8 2018-09-25 Insufficient policy enforcement in Catalog Service in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially run arbitrary code outside …	HIGH 8.8	—		2018-09-25
CVE-2018-6054 HIGH 8.8 2018-09-25 Use after free in WebUI in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially exploit heap corruption via a crafted Chrome Extension.	HIGH 8.8	—		2018-09-25
CVE-2018-6043 HIGH 8.8 2018-09-25 Insufficient data validation in External Protocol Handler in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially execute arbitrary pr…	HIGH 8.8	—		2018-09-25
CVE-2018-6035 HIGH 8.8 2018-09-25 Insufficient policy enforcement in DevTools in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially leak user local file data via a cr…	HIGH 8.8	—		2018-09-25
CVE-2018-6034 HIGH 8.1 2018-09-25 Insufficient data validation in WebGL in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to perform an out of bounds memory read via a crafted H…	HIGH 8.1	—		2018-09-25
CVE-2018-6033 HIGH 8.8 2018-09-25 Insufficient data validation in Downloads in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially run arbitrary code outside sandbox v…	HIGH 8.8	—		2018-09-25
CVE-2018-6031 HIGH 8.8 2018-09-25 Use after free in PDFium in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.	HIGH 8.8	—		2018-09-25
CVE-2018-14647 HIGH 7.5 2018-09-25 Python's elementtree C accelerator failed to initialise Expat's hash salt during initialization. This could make it easy to conduct denial of service attacks a…	HIGH 7.5	—		2018-09-25
CVE-2018-8469 HIGH 7.4 Microsoft Edge 2018-09-13 An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to escape from the AppContainer sandbox in the browser, aka "Micr…	HIGH 7.4	—	Microsoft Edge	2018-09-13
CVE-2018-8467 HIGH 7.5 Microsoft Edge 2018-09-13 A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng…	HIGH 7.5	—	Microsoft Edge	2018-09-13
CVE-2018-8466 HIGH 7.5 Microsoft Edge 2018-09-13 A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng…	HIGH 7.5	—	Microsoft Edge	2018-09-13
CVE-2018-8465 HIGH 7.5 Microsoft Edge 2018-09-13 A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng…	HIGH 7.5	—	Microsoft Edge	2018-09-13
CVE-2018-8464 HIGH 7.5 Microsoft Edge 2018-09-13 An remote code execution vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory, aka "Microsoft Edge PDF Remote Code Executio…	HIGH 7.5	—	Microsoft Edge	2018-09-13
CVE-2018-8463 HIGH 7.4 Microsoft Edge 2018-09-13 An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to escape from the AppContainer sandbox in the browser, aka "Micr…	HIGH 7.4	—	Microsoft Edge	2018-09-13
CVE-2018-8459 HIGH 7.5 Microsoft Edge 2018-09-13 A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption…	HIGH 7.5	—	Microsoft Edge	2018-09-13
CVE-2018-8457 HIGH 7.5 Microsoft Edge 2018-09-13 A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corr…	HIGH 7.5	—	Microsoft Edge	2018-09-13
CVE-2018-8456 HIGH 7.5 Microsoft Edge 2018-09-13 A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption…	HIGH 7.5	—	Microsoft Edge	2018-09-13
CVE-2018-8430 HIGH 7.8 2018-09-13 A remote code execution vulnerability exists in Microsoft Word if a user opens a specially crafted PDF file, aka "Word PDF Remote Code Execution Vulnerability.…	HIGH 7.8	—		2018-09-13
CVE-2018-8367 HIGH 7.5 Microsoft Edge 2018-09-13 A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng…	HIGH 7.5	—	Microsoft Edge	2018-09-13
CVE-2018-8354 HIGH 7.5 Microsoft Edge 2018-09-13 A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory Cor…	HIGH 7.5	—	Microsoft Edge	2018-09-13
CVE-2018-8331 HIGH 7.8 2018-09-13 A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Rem…	HIGH 7.8	—		2018-09-13
CVE-2018-8468 HIGH · vendor Windows 2018-09-11 Windows Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2018-09-11
CVE-2018-8462 HIGH · vendor Windows 2018-09-11 DirectX Graphics Kernel Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2018-09-11
CVE-2018-8455 HIGH · vendor Windows 2018-09-11 Windows Kernel Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2018-09-11
CVE-2018-8449 HIGH · vendor Windows 2018-09-11 Device Guard Security Feature Bypass Vulnerability	HIGH · vendor	—	Windows	2018-09-11
CVE-2018-8446 HIGH · vendor Windows 2018-09-11 Windows Kernel Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2018-09-11
CVE-2018-8445 HIGH · vendor Windows 2018-09-11 Windows Kernel Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2018-09-11
CVE-2018-8443 HIGH · vendor Windows 2018-09-11 Windows Kernel Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2018-09-11

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM